220
Setting/Setting Confirmation
|
fixed.
•
IP Address: Select when the IP
address of the IPsec peer device
is fixed.
Remote Peer
Set the IP Address when "IP
Address" is selected in "Remote
Peer Setting".
Not set
Local Traffic Selector: 1-5 Set the IP address and subnet mask
of the local network.
Set it according to the
ID of the peer for IPsec
communication. If there
are multiple subnets
subject to IPsec, input
more than one in the
local ID.
Not Set
Remote Traffic Selector:1-
5
Set the IP address and subnet mask
of the corresponding device
network.
Set it according to the
ID of the peer for IPsec
communication. If there
are multiple subnets
subject to IPsec, input
more than one in
remote ID.
Not Set
Encryption Algorithms
Set the encryption algorithm to be
used at IKE_AUTH
•
AES256-CBC
•
AES192-CBC
•
AES128-CBC
•
3DES-CBC
•
NULL
AES256-CBC
Authentication Algorithms Set the authentication algorithm to
be used at IKE_AUTH.
•
HMAC-SHA1-96
•
HMAC-SHA2-256
•
HMAC-MD5-96
HMAC-SHA1-96
Lifetime
(
sec
)
Set the validity period of the IPsec
SA.
Input range is from 300 to 691,200
seconds.
Use a value that is
smaller than the one
set at the destination.
Rekey is done at
random between 70%
to 85% of the set
lifetime.
28800
Lifetime with Data (Kbyte) Specify the amount of data to
Not specified